Multiple security vulnerabilities have been identified in Apache ActiveMQ and its KahaDB and Runtime Config components, affecting versions from 6.0.0 before 6.3.3 and from 5.19.0 before 5.19.12. These include input validation flaws allowing LDAP search base manipulation, consumer ID spoofing enabling unauthorized message consumption and deletion, denial of service via memory leak from rejected subscriptions, broker crashes from oversized durable subscription identifiers, and improper authorization cache invalidation allowing unauthorized message sending. These issues are addressed in Apache ActiveMQ versions 6.4.0, 6.3.3, and 5.19.12.